Fixed a typo in AJAX sample

Expected header is ``X-CSRF-Token`` according to the [csrf.go, line 16](https://github.com/cbonello/revel-csrf/blob/master/csrf.go#L16), not ``X-CSRFToken``.